PT-2026-107416

CVE-2026-105322

·

Published

2026-10-07

·

Updated

2026-10-16

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Magee Shortcodes WordPress plugin versions prior to 2.1.2
Description The plugin fails to restrict the recipient of certain unauthenticated contact-form actions. This allows unauthenticated users to perform a mail relay, sending arbitrary emails to any specified address through the website.
Recommendations Update the plugin to version 2.1.2 or later.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-472: External Control of Assumed-Immutable Web Parameter
Related identifiers
CVE-2026-105322
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com